month report
December 2004
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
December 2004 closed with 248 published CVEs. 101 criticals, redhat led volume, mostly via fedora core. Top weakness class — CWE-119 (4 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
248
— MoM— YoY
Severity mix
101 / 40
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.0%
0 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
—
n=0
Within 7 days
—%
Within 30 days
—%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in December 2004
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — December 2004
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #3suse17 CVE
- #4ubuntu17 CVE
- #5gentoo16 CVE
- #8trustix13 CVE
- #12gentoo foundation inc.6 CVE
- #13mplayer6 CVE
- #15carnegie mellon university5 CVE
- #19gadu-gadu5 CVE
- #25sugarcrm4 CVE
- #26tips4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 29 CVE11 critCVSS 6.6PoC 6fedora core (19) · enterprise linux (12) · enterprise linux desktop (12)
- 24 CVE9 critCVSS 6.7PoC 7debian gnu/linux (24)
- 17 CVE3 critCVSS 6.2NEWPoC 2suse linux (17)
- 17 CVE8 critCVSS 7.2NEWPoC 1ubuntu linux (17)
- 16 CVE4 critCVSS 6.5NEWPoC 3linux (15) · mirrorselect (1)
- 16 CVE2 critCVSS 5.6PoC 2linux kernel (16)
- 16 CVE6 critCVSS 8.6PoC 1windows nt (8) · windows 2003 server (7) · windows 2000 (7)
- 13 CVE7 critCVSS 8.2NEWsecure linux (13)
- 11 CVE2 critCVSS 5.3PoC 1debian linux (10) · debmake (1)
- 7 CVE2 critCVSS 6.9PoC 2mandrake linux (7) · mandrake linux corporate server (2)
- 6 CVE3 critCVSS 7.5linux (6)
- 6 CVE1 critCVSS 5.2NEWPoC 2gentoo linux (6)
- 6 CVE6 critCVSS 10.0NEWPoC 1mplayer (5) · unix mplayer (1)
- 6 CVE5 critCVSS 9.2PoC 1php (6)
- 5 CVE5 critCVSS 10.0NEWcyrus imap server (5)
- 5 CVE1 critCVSS 5.7cns network registrar (2) · multiservice platform 2650xm (1) · multiservice platform 2651xm (1)
- 5 CVE1 critCVSS 5.0PoC 4cups (5)
- 5 CVECVSS 5.0ethereal (5)
- 5 CVE1 critCVSS 6.5NEWgadu-gadu instant messenger (5)
- 5 CVE5 critCVSS 10.0openpkg (5)
- 4 CVECVSS 5.7PoC 1safari (3) · mac os x (1) · quicktime streaming server (1)
- 4 CVE1 critCVSS 6.8PoC 1kde (2) · konqueror (2) · kdelibs (1)
- 4 CVECVSS 4.6PoC 2firefox (2) · mozilla (2) · bugzilla (1)
- 4 CVE1 critCVSS 6.3propack (3) · irix (1)
- 4 CVE2 critCVSS 7.8NEWPoC 1sugarcrm (2) · sugar sales (2)
- 4 CVECVSS 5.7NEWPoC 1mailpost (4)
- 4 CVECVSS 5.9turbolinux server (4)
- 3 CVECVSS 5.0NEWalt linux (3)
- 3 CVE1 critCVSS 6.7NEWPoC 2kreed (3)
- 3 CVE3 critCVSS 10.0NEWubuntu linux (3)
- 3 CVECVSS 2.5serverfirewall (2) · kerio mailserver (2) · winroute firewall (2)
- 3 CVE3 critCVSS 10.0NEWxine-lib (3) · xine (2)
- 3 CVE2 critCVSS 8.5NEWzgv image viewer (3) · xzgv image viewer (2)
- 2 CVE2 critCVSS 10.0PoC 1acrobat reader (2)
- 2 CVECVSS 7.5NEWPoC 1etrust ez antivirus (2) · etrust antivirus (1) · brightstor arcserve backup (1)
- 2 CVE1 critCVSS 7.5NEWPoC 1weblibs (2)
- 2 CVE2 critCVSS 10.0NEWimlib (2)
- 2 CVE2 critCVSS 10.0NEWPoC 1greed (2)
- 2 CVECVSS 7.2aix (2)
- 2 CVECVSS 3.5PoC 2iglooftp (2)
- 2 CVECVSS 6.8NEWPoC 1inmail (2) · inshop (2)
- 2 CVE1 critCVSS 7.5NEWPoC 2junkie ftp client (2)
- 2 CVECVSS 5.0NEWstar wars battlefront (2)
- 2 CVE2 critCVSS 10.0NEWPoC 1ringtonetools (1) · vb2c (1)
- 2 CVE1 critCVSS 7.5NEWmaxdb (2)
- 2 CVE1 critCVSS 7.5NEWnfs-utils (2)
- 2 CVECVSS 6.3NEWopera browser (2)
- 2 CVECVSS 5.9NEWPoC 1phpcms (2)
- 2 CVE1 critCVSS 7.5NEWphpmyadmin (2)
- 2 CVECVSS 4.7NEWviewcvs (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | redhat | 29 | 11 | · | · | PoC 6 | fedora core (19) · enterprise linux (12) · enterprise linux desktop (12) | — | |
| 2 | сообщество свободного программного обеспечения | 24 | 9 | · | · | PoC 7 | debian gnu/linux (24) | — | |
| 3 | suse | 17 | 3 | · | · | NEWPoC 2 | suse linux (17) | — | |
| 4 | ubuntu | 17 | 8 | · | · | NEWPoC 1 | ubuntu linux (17) | — | |
| 5 | gentoo | 16 | 4 | · | · | NEWPoC 3 | linux (15) · mirrorselect (1) | — | |
| 6 | linux | 16 | 2 | · | · | PoC 2 | linux kernel (16) | — | |
| 7 | microsoft | 16 | 6 | · | · | PoC 1 | windows nt (8) · windows 2003 server (7) · windows 2000 (7) | — | |
| 8 | trustix | 13 | 7 | · | · | NEW | secure linux (13) | — | |
| 9 | debian | 11 | 2 | · | · | PoC 1 | debian linux (10) · debmake (1) | — | |
| 10 | mandrakesoft | 7 | 2 | · | · | PoC 2 | mandrake linux (7) · mandrake linux corporate server (2) | — | |
| 11 | conectiva | 6 | 3 | · | · | linux (6) | — | ||
| 12 | gentoo foundation inc. | 6 | 1 | · | · | NEWPoC 2 | gentoo linux (6) | — | |
| 13 | mplayer | 6 | 6 | · | · | NEWPoC 1 | mplayer (5) · unix mplayer (1) | — | |
| 14 | php | 6 | 5 | · | · | PoC 1 | php (6) | — | |
| 15 | carnegie mellon university | 5 | 5 | · | · | NEW | cyrus imap server (5) | — | |
| 16 | cisco | 5 | 1 | · | · | cns network registrar (2) · multiservice platform 2650xm (1) · multiservice platform 2651xm (1) | — | ||
| 17 | easy software products | 5 | 1 | · | · | PoC 4 | cups (5) | — | |
| 18 | ethereal group | 5 | · | · | · | ethereal (5) | — | ||
| 19 | gadu-gadu | 5 | 1 | · | · | NEW | gadu-gadu instant messenger (5) | — | |
| 20 | openpkg | 5 | 5 | · | · | openpkg (5) | — | ||
| 21 | apple | 4 | · | · | · | PoC 1 | safari (3) · mac os x (1) · quicktime streaming server (1) | — | |
| 22 | kde | 4 | 1 | · | · | PoC 1 | kde (2) · konqueror (2) · kdelibs (1) | — | |
| 23 | mozilla | 4 | · | · | · | PoC 2 | firefox (2) · mozilla (2) · bugzilla (1) | — | |
| 24 | sgi | 4 | 1 | · | · | propack (3) · irix (1) | — | ||
| 25 | sugarcrm | 4 | 2 | · | · | NEWPoC 1 | sugarcrm (2) · sugar sales (2) | — | |
| 26 | tips | 4 | · | · | · | NEWPoC 1 | mailpost (4) | — | |
| 27 | turbolinux | 4 | · | · | · | turbolinux server (4) | — | ||
| 28 | altlinux | 3 | · | · | · | NEW | alt linux (3) | — | |
| 29 | burut | 3 | 1 | · | · | NEWPoC 2 | kreed (3) | — | |
| 30 | canonical | 3 | 3 | · | · | NEW | ubuntu linux (3) | — | |
| 31 | kerio | 3 | · | · | · | serverfirewall (2) · kerio mailserver (2) · winroute firewall (2) | — | ||
| 32 | xine | 3 | 3 | · | · | NEW | xine-lib (3) · xine (2) | — | |
| 33 | zgv | 3 | 2 | · | · | NEW | zgv image viewer (3) · xzgv image viewer (2) | — | |
| 34 | adobe | 2 | 2 | · | · | PoC 1 | acrobat reader (2) | — | |
| 35 | broadcom | 2 | · | · | · | NEWPoC 1 | etrust ez antivirus (2) · etrust antivirus (1) · brightstor arcserve backup (1) | — | |
| 36 | darryl burgdorf | 2 | 1 | · | · | NEWPoC 1 | weblibs (2) | — | |
| 37 | enlightenment | 2 | 2 | · | · | NEW | imlib (2) | — | |
| 38 | greed | 2 | 2 | · | · | NEWPoC 1 | greed (2) | — | |
| 39 | ibm | 2 | · | · | · | aix (2) | — | ||
| 40 | iglooftp | 2 | · | · | · | PoC 2 | iglooftp (2) | — | |
| 41 | insite | 2 | · | · | · | NEWPoC 1 | inmail (2) · inshop (2) | — | |
| 42 | junkie | 2 | 1 | · | · | NEWPoC 2 | junkie ftp client (2) | — | |
| 43 | lucasarts | 2 | · | · | · | NEW | star wars battlefront (2) | — | |
| 44 | michael kohn | 2 | 2 | · | · | NEWPoC 1 | ringtonetools (1) · vb2c (1) | — | |
| 45 | mysql | 2 | 1 | · | · | NEW | maxdb (2) | — | |
| 46 | nfs | 2 | 1 | · | · | NEW | nfs-utils (2) | — | |
| 47 | opera | 2 | · | · | · | NEW | opera browser (2) | — | |
| 48 | phpcms | 2 | · | · | · | NEWPoC 1 | phpcms (2) | — | |
| 49 | phpmyadmin | 2 | 1 | · | · | NEW | phpmyadmin (2) | — | |
| 50 | viewcvs | 2 | · | · | · | NEW | viewcvs (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Operating Systems106 CVE84 crit29 vendorsCVSS 8.6debian gnu/linux (24) · linux (23) · ubuntu linux (20)
- Consumer Software31 CVE25 crit18 vendorsCVSS 10.0mplayer (5) · xine-lib (3) · xine (2)
- Security Products23 CVE7 crit11 vendorsCVSS 7.8secure linux (13) · antivirus engine (1) · kaspersky anti-virus (1)
- Communications23 CVE11 crit10 vendorsCVSS 8.1cyrus imap server (5) · mailpost (4) · cmailserver (2)
- Web & CMS Plugins17 CVE5 crit14 vendorsCVSS 10.0phpcms (2) · weblibs (2) · advanced guestbook (1)
- OSS Libraries14 CVE10 crit9 vendorsCVSS 8.3php (6) · a2ps (1) · dynazip library (1)
- Enterprise Software14 CVE8 crit10 vendorsCVSS 10.0aix (2) · backup exec (1) · etrust antivirus (1)
- 5 crit9 vendorsCVSS 10.0cns network registrar (2) · 7200 router (1) · 7300 router (1)
- DevTools & CI10 CVE8 crit6 vendorsCVSS 10.0openpkg (5)
- Databases5 CVE2 crit3 vendorsCVSS 7.5maxdb (2) · mysql (1)
- Mobile Apps4 CVE1 vendorsCVSS 5.7safari (3) · darwin streaming server (1) · mac os x (1)
- Cloud & SaaS2 CVE1 vendorsCVSS 7.5etrust ez antivirus (2) · brightstor arcserve backup (1) · etrust antivirus (1)
- Unclassified31 CVE19 crit25 vendorsCVSS 8.0kreed (3) · greed (2) · iglooftp (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Operating Systems▸ 3 | 106 | 84 | · | 29 | 44 | 8.6 | debian gnu/linux (24) · linux (23) · ubuntu linux (20) |
| Consumer Software▸ 5 | 31 | 25 | · | 18 | 25 | 10.0 | mplayer (5) · xine-lib (3) · xine (2) |
| Security Products▸ 3 | 23 | 7 | · | 11 | 15 | 7.8 | secure linux (13) · antivirus engine (1) · kaspersky anti-virus (1) |
| Communications▸ 2 | 23 | 11 | · | 10 | 10 | 8.1 | cyrus imap server (5) · mailpost (4) · cmailserver (2) |
| Web & CMS Plugins▸ 5 | 17 | 5 | · | 14 | 15 | 10.0 | phpcms (2) · weblibs (2) · advanced guestbook (1) |
| OSS Libraries▸ 1 | 14 | 10 | · | 9 | 9 | 8.3 | php (6) · a2ps (1) · dynazip library (1) |
| Enterprise Software▸ 5 | 14 | 8 | · | 10 | 13 | 10.0 | aix (2) · backup exec (1) · etrust antivirus (1) |
| Networking Infrastructure▸ 5 | 14 | 5 | · | 9 | 25 | 10.0 | cns network registrar (2) · 7200 router (1) · 7300 router (1) |
| DevTools & CI▸ 3 | 10 | 8 | · | 6 | 6 | 10.0 | openpkg (5) |
| Databases▸ 2 | 5 | 2 | · | 3 | 3 | 7.5 | maxdb (2) · mysql (1) |
| Mobile Apps▸ 1 | 4 | · | · | 1 | 5 | 5.7 | safari (3) · darwin streaming server (1) · mac os x (1) |
| Cloud & SaaS▸ 1 | 2 | · | · | 1 | 8 | 7.5 | etrust ez antivirus (2) · brightstor arcserve backup (1) · etrust antivirus (1) |
| Unclassified | 31 | 19 | · | 25 | 26 | 8.0 | kreed (3) · greed (2) · iglooftp (2) |
Weakness × Sector
Which weaknesses hit which solution categories in December 2004
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds20Improper Input Validation787Out-of-bounds Write264CWE-264400Resource Consumption74Injection94Code InjectionOperating Systems122Consumer Software1111Security Products11Communications2OSS Libraries11Networking InfrastructureWeb & CMS PluginsEnterprise SoftwareDevTools & CI11Databases